EDPS Refines Generative AI Guidelines: A Blueprint for Lawful Innovation in the EU

October 29, 2025 — In a significant move toward harmonizing artificial intelligence with data protection principles, the European Data Protection Supervisor (EDPS) has released updated guidelines aimed at ensuring the lawful use of generative AI across EU institutions. These revisions come at a time when AI technologies are rapidly evolving, and regulatory clarity is more …

Texas Attorney General Issues Consumer Alert Warning Texans of Potential Scams Following Nationwide CrowdStrike Outage

FOR IMMEDIATE RELEASEJuly 19, 2024www.texasattorneygeneral.govPRESS OFFICE: (512) 463-2050Communications@oag.texas.govAttorney General Ken Paxton Issues Consumer Alert Warning Texans of Potential Scams Following Nationwide CrowdStrike Outage   AUSTIN – Texas Attorney General Ken Paxton warned Texans of potential scams following the widespread CrowdStrike service outage.  Texans should be aware that bad actors can use cybersecurity incidents to take advantage …

OCR Settles HIPAA Security Rule Enforcement Action with Heritage Valley Health System Stemming from Ransomware Attack

On July 2, 2024, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement with Heritage Valley Health System (Heritage Valley), a healthcare provider operating in Pennsylvania, Ohio, and West Virginia. This is the OCR’s third ransomware settlement and is based on allegations of potential violations of the Health …

Texas Attorney General Launches Major AI, Data Privacy, and Security Initiative

FOR IMMEDIATE RELEASEJune 4, 2024www.texasattorneygeneral.govPRESS OFFICE: (512) 463-2050Communications@oag.texas.gov Attorney General Ken Paxton Launches Data Privacy and Security Initiative to Protect Texans’ Sensitive Data from Illegal Exploitation by Tech, AI, and Other Companies  AUSTIN – Texas Attorney General Ken Paxton has launched a major data privacy and security initiative, establishing a team that is focused on aggressive …

Counseling Clients on Managing the Risks of Artificial Intelligence – Texas Bar Journal

I would like to say a big ole Texas-sized “Thank You” to the Texas Bar Journal for publishing Legal Reasoning: Counseling Clients on Managing the Risks of Artificial Intelligence, in the May 2024 issue of the Journal. I wrote this article along with my colleague Kristen Petry, whose work was invaluable in the preparation of …

Texas Bar Journal 2023 Cybersecurity & Data Privacy Year in Review

I am happy that I was able to provide the Texas Bar Journal’s 2023: The Year In Review – Cybersecurity & Data Privacy Update which addressed the following issues: how the Texas “hacking laws” and issue of “consent” impact the discovery of evidence of child pornography whether sending a malicious phishing email violates “hacking laws” …

Neural Privacy is Where It’s At — Brain Scanning Technology is Causing States to Look at Protecting the Privacy of Our Thoughts

UPDATES 2024.03.15 Neuralink is now being used to play chess! https://www.youtube.com/watch?v=LfwzfP8cp3A This morning I read an article about how brain scanning technology is causing Colorado and Minnesota to propose legislation that is aimed at establishing rights and protections for information collected from our thoughts through the neural signals that can be scanned and collected from …

How to Implement Cybersecurity Insurance for Small and Medium/Large Organizations – HHS 405(d) Resource

HHS 405(d) is an excellent resource that provides cybersecurity and cyber risk guidance for not only healthcare organizations, but all organizations. HHS 405(d) released the following resource for cyber insurance. Before getting to the resource, however, there are two critical things you must know about cyber insurance: Your organization must have it. For incident response …

DFW Area Security Peeps – Join me at SecureWorld Dallas on October 25th & 26th!

I am super excited to share that I will speaking at one of my absolute favorite conferences each year — the United States’ preeminent cybersecurity conference — SecureWorld – Dallas! On Wednesday, October 25, 2023, I will be leading a full day workshop for SecureWorld Plus registrants on Real-World Cyber Risk Management and Resilience Planning …

A few quotes from my keynote at SecureWorld Boston

Following the outstanding SecureWorld Boston event, my friends at SecureWorld shared Highlights and Insights from SecureWorld Boston 2023 and were kind enough to include a few quotes from my lunch keynote — let me know what you think and please offer your perspective on these ideas: The final keynote session was given by Shawn Tuma, Co-Chair …